Recuva Video File Conversion?

[ZGCYOP]

Does anyone know if Recuva could misinterpret video compression during the recovery process and mislabel video files? In this case video files were changed from MPEG-4 to WMV. 

 

Background information-

 

We have an SD card that was used in a stealth camera. The camera has been tested and saves video onto the SD card in a MPEG4 format. The files were deleted from the SD card. Using Recuva we were able to retrieve the video files that had been deleted however, now they are WMV files.

 

Our timestamps indicate that the recovered files are the files of interest and no other cameras or options exist at this point to explain how the MPEG-4 deleted files have magically turned into WMV files during the recovery process. 

 

Has anyone else ran into this issue? Any help would be greatly appreciated. Thank you very much for your time.

 

Regards,

ZG

 

 

[Augeas]

Scan the card again and in Advanced Mode look at the header info panel. Are bytes 5 to 8 'ftyp' (mp4) or are the first seven bytes '30 26 B2 75 8E 66 CF' (wmv)? If not, what are they?

 

Recuva does not indulge in any file conversion, it copies what is in the file clusters. Do the videos play, and are they what you expected?

[ZGCYOP]

I was just confused. MPEG-4 turned out to be the codec. WMV is just the box or the wrapping around the video file. Big difference here between the codec and the wrapping. The video files play fine, they are exactly what they claim to be (MPEG-4 codec with .wmv file format).